-

CVE-2026-74460

can: ems_usb: validate CPC message lengths

In the Linux kernel, the following vulnerability has been resolved:

can: ems_usb: validate CPC message lengths

ems_usb_read_bulk_callback() walks CPC messages packed in one USB
receive buffer.

Check that each declared message fits in the URB payload. Also require the
type-specific payload to cover the fields used by the CAN, state, error and
overrun handlers.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < db5655287d78f00daf98888a520bb8da4d30126d
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < ce8125566b1d0b0f16449407e014addf451804ea
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < 0b9090717c7e2184e2c427bbcc752f295116ac1d
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < 0b23144c59c126beb4a7761a85a194ae0fe668a5
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < df3ac2a672a5284441f120d486acabdd6740fc2a
Status affected
Version 702171adeed3607ee9603ec30ce081411e36ae42
Version < 02925f51377f2a42a6724f00549167499c9302e5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.32
Status affected
Version 0
Version < 2.6.32
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ce8125566b1d0b0f16449407e014addf451804ea
https://git.kernel.org/stable/c/0b9090717c7e2184e2c427bbcc752f295116ac1d
https://git.kernel.org/stable/c/0b23144c59c126beb4a7761a85a194ae0fe668a5
https://git.kernel.org/stable/c/df3ac2a672a5284441f120d486acabdd6740fc2a
https://git.kernel.org/stable/c/02925f51377f2a42a6724f00549167499c9302e5
https://git.kernel.org/stable/c/bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6
https://git.kernel.org/stable/c/db5655287d78f00daf98888a520bb8da4d30126d